CVE-2020-0084

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local escalation of privilege by creating fake system notifications with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143339775

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Mar 10, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-00857.8In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing permission check. This could lead to locCVE-2020-00869.8In readCString of Parcel.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to arbitrary code executioCVE-2020-00875.5In getProcessPss of ActivityManagerService.java, there is a possible side channel information disclosure. This could lead to local informatiCVE-2020-00886.5In parseTrackFragmentRun of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to rCVE-2020-00897.8In the audio server, there is a missing permission check. This could lead to local escalation of privilege regarding audio settings with no CVE-2020-00905.5An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048CVE-2020-00915.5In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAndroid ID: A-149808700CVE-2020-00925.0In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification content due to a permissCVE-2020-00935.0In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local CVE-2020-00947.8In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lCVE-2020-00967.8In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead toCVE-2020-00977.8In various methods of PackageManagerService.java, there is a possible permission bypass due to a missing condition for system apps. This cou
CVE-2020-0084: High severity, CVSS 7.8 | Vulnix